vulnerability
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
HighCVSS 8.6Exploited
Summary
CISA has added a newly exploited zero-day vulnerability, CVE-2026-104935, to its list of known exploited vulnerabilities. This allows unauthenticated remote command execution, leading to credential theft and data exfiltration. Organizations running Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior are urged to immediately update to the latest version, and should investigate potential compromise through forensics.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data